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PASSWORD VALUE 
BASED ON GEOGRAPHIC LOCATION 

TECHNICAL FIELD 

This invention relates generally to the field of accessing electronic 
devices and more particularly relates to enabling an electronic device using 
a password associated with a geographic position. 

BACKGROUND OF THE INVENTION 

People in our society have become increasingly mobile and, not 
coincidentally, have increasingly come to rely on their electronic devices 
such as laptop computers, cellular phones, hand-held personal digital 
assistants, etc. as they travel. These devices, moreover, have become 
increasingly more complex and capable of maintaining a myriad of programs 
as well as maintaining connections with networks such as the Internet. 
Telecommuting, i.e., maintaining a business office in a place other than a 
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headquartered office such as one's home and connecting to an employer 
through a computer or hand-held microprocessing device, occurs across 
town, across the country, and even across international borders. People 
demand more of their electronic communication devices too. People want to 
5 be able to conduct personal and/or business financial transactions, legal 
transactions, communications with business associates, employers, 
employees, family, friends all with one device. 

In a perfect world, there would be no need for security of one's 
information but information has been protected as long as the first secret 
10 was spoken; and as long as a person or business entity considers his/her 
Jrt own information confidential. An electronic device having confidential 
p{ information may need only be enabled at a place of employment or other 
3 Bj= j specific location and it is preferred or even required that access not be 
W granted to the device outside of a particular locale. The devices, moreover, 
s i 5 have become subject to thievery irrespective of the information contained 
jTJ therein. So, it is imperative that a person be able to restrict use of a device. 

C3 There are, moreover, a number of security schema which use 

geographic location as a method to restrict access to devices or to enable 
certain devices. The Global Positioning System (GPS) was designed for, is 

20 funded and operated by the U. S. Department of Defense (DOD) although 

there are many thousands of civilian uses of GPS world-wide. The nominal 
GPS Operational Constellation consists of twenty-four satellites that orbit 
the earth in twelve hours. There are often more than twenty-four 
operational satellites as new ones are launched to replace older satellites. A 

25 satellite orbit repeats almost the same ground track as the earth turns 
beneath them once each day. A system of tracking stations are located 
around the world with the Master Control facility at Schriever Air Force Base 
in Colorado. These monitor stations measure signals from the satellites 
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which are incorporated into orbital models for each satellite which compute 
precise orbital data and clock corrections for each satellite. The Master 
Control station uploads the corrected orbital and clock data to the satellites. 
The satellites then send subsets of the orbital data to GPS receivers via radio 
signals all over the world. The GPS receiver processes the signals to 
compute position, velocity and time of the satellite and/or the receiver. Four 
GPS satellite signals are used to compute positions in three dimensions and 
the time offset in the receiver clock. 

GPS has been used for years in aircraft, ships, etc. but now 
consumers are using GPS in computers, automobiles, cellular phones, etc. 
One such security system is set forth in U.S. Patent No. 5,922,073 entitled 
System and Method for Controlling Access to Subject Data Using Location Data 
Associated with the Subject Data and a Requesting Device to Shimada. In 
this system, a user enters a password associated with the data, 
simultaneously a GPS receiver detects the location and if the location is not 
the proper location attributed to the data, access to the data is prohibited. 
Shimada restricts access only to data by two independent tests: first, the 
password entered must be the correct password for that data; and second, 
the requesting device must be in an allowable geographic location. The 
password itself is not associated with the geographic location. Shimada, 
moreover, allows access to the requesting device and limits access only to 
data, which under some circumstances, may be undesirable. As an 
example, it is more likely that a hacker will presume a password to be 
associated with or correlated to particular data, as in Shimada, rather than 
with a particular geographic location. It is easier to invoke data intrusion or 
hacking algorithms once access is granted to a requesting device than when 
the device cannot even be enabled. Additionally, inadvertent access to 
critical information or other applications resulting in hard-drive failure or 
other failures or damage to the system by, for instance, children is easier if a 
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system is enabled and usable. Thus, more secure protection from 
intentional intrusion and/ or accidental damage occurs when the requesting 
device may not even be enabled. 

Another device is disclosed in a Research Disclosure 421 139 entitled 
Automatic laptop reconfiguration based on location of May 1999 in which a 
GPS tracking chip within a laptop computer interacts with the operating 
system and other program to automatically reconfigure the system clock, 
time zones, telephone numbers to call for network connections, etc., upon 
traveling to different time zones. Access is still allowed, however, to the 
computer and its processes, with the attendant risks as described above. 

Shimada and other art, moreover, make no accommodation for 
overlapping and/ or adjacent geographic regions and for assigning priorities 
to those regions. A user is tasked with remember which password is 
applicable to which data and if she/he crosses a street or enters another 
building, may be required to enter another password. In this time of 
memorizing and updating our multitude of passwords, life could be 
simplified if only the password for the highest priority geographic region in 
which the electronic processing device is located need be entered. The user 
need not concern herself/ himself with remembering which password is 
associated with which application or with which building at a site if the user 
need only enter a password for entire site and if the site password has a 
higher priority than the building password. 

There is thus a need in the industry to restrict access to an electronic 
processing device by simply entering a password based on geographic 
location. There is a further need in the industry to allow or restrict access to 
a device in overlapping and/ or adjacent geographic locations in terms of 
priority of the geographic regions. 
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SUMMARY OF THE INVENTION 

These needs and others that will become apparent to one skilled in the 
art are satisfied by an processing device, comprising: a user interface to 
interact with a user; location detection electronics; processing electronics 
5 connected to the user interface and the location detection electronics; a 
memory connected to the processing electronics to store a plurality of 
passwords associated with a plurality of geographic regions; and a 
gatekeeper to access the processing electronics when an input password 
from the user interface is the same as a password in memory and when the 
location detection electronics inputs a present location to the processing 

5 electronics that is one of the plurality of geographic regions with which the 

M 

=P input password is associated. 

?=y The invention may further be considered a method to establish a 

O password in an electronic processing device, comprising the steps of: 
|J5 invoking a user interface of the electronic processing device; entering a 

description of a first geographic location; creating a first password; 
^ associating the first password with the first geographic region; enabling a 
user to access information within the electronic device when the electronic 
device is in the first geographic region only when the first password is 
20 entered by the user. 

Entering a description of a first geographic region may be 
accomplished in a number of ways. In one embodiment a user may obtain 
the GPS location from GPS processing electronics within the electronic 
processing device and create boundaries by extending a selected distance 
25 from the GPS location. In another embodiment, a user may delineate the 

boundaries of the first geographic region using a graphical user interface on 
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a map containing the first geographic region. Still, yet a user may enter the 
longitude and latitude coordinates of the boundaries of the geographic 
region. And yet, a user may enter a street address associated with a 
geographic region. 

A user may enter a description of a second geographic region and 
create a second password associated with the second geographic region. 
Priorities may assigned to the first and second geographic region. The 
method may further comprise allowing the user to access the electronic 
processing device in the second region by entering the first password if the 
first geographic region is of higher and/ or equal priority than the second 
geographic region and the electronic processing device is in an area of the 
second region overlapping an area of the first region. Creating a password 
may further require inspecting the password to determine it is valid 
according to password generation rules. The method further contemplates 
that the first password and the second passwords are inspected to 
determine if they are valid according to password generation rules. The 
password generation rules may differ from password to password and from 
geographic region to geographic region. 

The user may further access information within the electronic device 
when the electronic device is in the first geographic region only when the 
first password is entered by the user, further comprises determining the 
present location of the electronic device using GPS signals processed by GPS 
processing electronics within the electronic device. 

In another embodiment, the invention is a method to restrict access to 
an electronic processing device, comprising the steps of: invoking a user 
interface of the electronic processing device; determining the present 
location of the electronic device; entering a geographic-specific password; 
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allowing access to the electronic processing device only when the 
geographic-specific password is associated with the present location of the 
electronic device. 

The invention may further be considered a method to protect an 
5 electronic processing device from unauthorized use, comprising the steps of: 
invoking a user interface of the electronic processing device; entering a 
description of at least one geographic location by a method selected from the 
group of methods consisting of: obtaining the GPS location from GPS 
processing electronics within the electronic processing device and creating 

10 boundaries by extending a selected distance from the GPS location, 

G delineating the boundaries of the first geographic region using a graphical 

CO user interface on a map containing the first geographic region, entering the 

~£ longitude and latitude of the boundaries of the geographic region, and 

?Jf entering a street address associated with a geographic region; creating at 

" h ¥5 least one password; associating each of the at least one password with one 

S3 of the at least one geographic region; determining the present location of the 

11 electronic processing device using GPS signals processed by GPS processing 
J.^ electronics within the electronic processing device; assigning priority to the 
"r A at least one geographic region; allowing the user to use the electronic 

20 processing device in the at least one geographic region by entering the at 
least one password if the at least one geographic region is the geographic 
region associated with the at least one password or if the at least one 
password is associated with a geographic region of higher or equal priority 
that contains the at least one geographic region. 

25 The invention is also an article of manufacture, comprising a data 

storage medium tangibly embodying a program of machine readable 
instructions executable by an electronic processing apparatus to perform 
method steps for operating the electronic processing apparatus, the method 
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steps comprising the steps of: storing a plurality of descriptions of 
geographic regions; storing a plurality of passwords, each associated with 
one or more of the descriptions of geographic regions; assigning a priority to 
each of the plurality of descriptions of geographic regions; determining the 
5 present location of the electronic processing device; and allowing a user to 
use the electronic processing device in the present location by entering an 
input password if the present location is within the description of the 
geographic region associated with the input password. 

The invention is also a secure electronic processing device, 
10 comprising: means to store a plurality of descriptions of geographic 
h i locations in which said secure electronic processing device may be used; 
W means to store a plurality of geographic-specific passwords, each of said 
r,5 passwords associated with each of said geographic locations; means to 
m determine the present location of said electronic processing device; means to 

determine that said present location is one of said geographic locations; 
O means to request an input password from a user; means to allow access to 
h& the electronic processing device only if said input password is one of said 

geographic- specific passwords pertaining to said present location. The 
^ means to determine that the present location is one of said geographic 
20 locations may further comprise a GPS antenna and GPS processing 

electronics. 

BRIEF DESCRIPTION OF THE DRAWING 

The novel features believed characteristic of the invention are set forth 
in the claims. The invention itself, however, as well as a preferred mode of 
25 use, objects and advantages thereof, will best be understood by reference to 
the following detailed description of an illustrative embodiment when read in 
conjunction with the accompanying Drawing, wherein: 
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Figure 1 is a high-level block diagram of an electronic processing 
device embodied as a computer system capable of implementing the 
invention. 

Figure 2 is an illustration of a graphical user interface which allows a 
user to ascribe passwords to a particular geographic region in accordance 
with principles of the invention. 

Figure 3 is a data structure of the geographic region data particularly 
associated with a password, priority, and a name. 

Figure 4 is a chart illustrating how which password rule program is 
associated with a particular geographic location. 

Figure 5 is a simplified flow chart of how an electronic processing 
device can be enabled during power-on within a geographic location have a 
particularized password. 

Figure 6 is a simplified flow chart of processing within an electronic 
processing device to change regions, passwords, priority, or password rules 
of a particular geographic location. 

Figure 7 is a simplified flow chart of the processing within an 
electronic device which can modify the data structure associated with a 
particular geographic location. 

Figure 8 is a simplified flow chart of processing within an electronic 
device which can be used to modify the password rules within a geographic 
location. 
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Referring to the Drawing, wherein like numbers denote like parts 
throughout the several views, Figure 1 shows a high-level block diagram of 
an electronic processing device 100, consistent with the preferred 
5 embodiment. Electronic processing device 100 may comprise a central 
processing unit (CPU) 105, memory 110, I/O controller and interface 115, 
network and/ or Internet interface 120, and geographic processing 
electronics 125 connected to a transmitting/receiving antenna 130. 
Geographic processing electronics 125 and transmitting/ receiving antenna 
10 130 may be integrated as in a GPS PCMCIA card such as that disclosed in 
% i U.S. Patent No. 5,861,841 entitled Compact GPS Receiver/ Processor to 
?2 Gildea et al. The various devices communicate with each other via internal 

~£ communications bus 135 which supports transfer of data, commands and 

hi 

m other information between different devices; while shown in simplified form 

T5 as a single bus, it is typically structured as multiple buses; and may be 

Q arranged in a hierarchical form. . 

CPU 105 may be a programmable processor, executing instructions 
*~ stored in memory 110; while a single CPU 105 is shown in Figure 1, it 

should be understood that electronic processing systems having multiple 
20 CPUs could be used. Memory 1 10 is a random-access semiconductor 

memory for storing data and programs; memory is shown conceptually as a 
single monolithic entity, it being understood that memory is often arranged 
in a hierarchy of caches and other memory devices. Operating system 140 
and applications 145 reside in memory 110. Operating system 140 
25 provides, inter alia, functions, such as device interfaces, management of 

memory pages, management of multiple tasks, etc. as is well- known in the 
art. Applications 145 may include a browser which provides a user- 
interface to the world wide web through the network/ Internet interface 120. 
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Some applications 145 including the browser may be integrated into 
operating system 140. I/O controller 115 may support the attachment of a 
single or multiple terminals, and may be implemented as one or multiple 
electronic circuit cards, adapters, or other units one of which may be a 
5 display adapter to support video display 150, which may be a cathode-ray 
tube display or a touch panel, although other display technologies may be 
used. A keyboard/ pointer adapter supports keyboard or keypad 152 and 
pointing device 154 depicted as a mouse, it being understood that other 
forms of input devices such as a pointing stylus could be used. A storage 

10 adapter supports one or more data storage devices 156 which may be 

rotating magnetic or optical disk drives, although other data storage devices 

O could be used. A printer adapter supports printer and/ or other output 

£0 devices, such as speakers (not shown). Other adapters may support any of 

O 

3 a variety of additional devices, such as communication hub 158, audio 
^£5 devices, etc. 

□ Network/ Internet interface 120 provides a physical connection for 

12 transmission of data to and from the Internet or any other network, and 
Ij; could use any various available technologies. This interface may comprise a 
B modem connected to a telephone line, through which an Internet access 
20 provider or on-line service provider is reached, but increasingly other higher 
bandwidth interfaces are implemented. For example, electronic processing 
device 100 may be connected to a local mainframe computer system via a 
local area network using an Ethernet, Token Ring, or other protocol, the 
mainframe in turn being connected to the Internet. Alternatively, Internet 
25 access may be provided through cable TV, wireless, or other types of 
connection. 



The electronic processing device shown in Figure 1 is intended to be a 
simplified representation of a computer system, it being understood that 
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many variations in system configuration are possible in addition to those 
specifically mentioned here. Electronic processing device 100 need not be a 
personal computer system such as that depicted in Figure 1 , and it may be 
a larger computer system, such as another server, or a smaller computer 
5 system, such as a notebook or laptop computer. Finally, electronic 

processing device 1 00 need not be a computer at all, but may be a simpler 
appliance- like client devices with less memory. It is fully intended that 
electronic processing device 100 include any electronic device which may 
interact through user-interfaces to execute a processing application and to 
10 be able to transmit/ receive data relating to geographic location, and in 

response thereto, enable processing within the electronic processing device, 
y Examples of other intended electronic processing devices 100, which list is 
m not intended to be exhaustive but merely exemplary, include a network 
_E terminal or a thin client or other terminal-like devices having smaller 
jij5 memory; voice response units (VRUs); terminals; world wide web browsers; 
IM and even pervasive mobile devices, such as personal digital assistants, 
Q pagers, and cell-phones. 

;L:f As will be described in detail below, aspects of the preferred 

embodiment pertain to specific method steps implementable on an electronic 

20 device having a computer processor. In an alternative embodiment, the 

invention may be implemented as a computer program-product for use with 
an electronic processing device 100. The programs defining the functions of 
the preferred embodiment can be delivered to the electronic processing 
device 100 via a variety of signal-bearing media, which include, but are not 

25 limited to information stored on a writable or non-writable storage media, 
e.g., read only memory devices such as magnetic or optical disks readable 
by a disk drive or floppy disks within diskette drive or hard-disk drive; or 
information conveyed to a computer by a telephone or a cable media 
network, including wireless communications. Such signal-bearing media, 
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when carrying computer-readable instructions that direct the functions of 
the present invention, represent alternative embodiments of the present 
invention. 

Each electronic processing system 100 has the necessary combination 
5 of hardware and software to implement a user interface by which a user can 
interact with the electronic processing device. Figure 2 is an example of a 
user interface by which the user can implement the location-specific 
password features of the invention. Given a user interface, such as a map 
210 shown on a monitor, for example, a user can move the boundaries of a 

10 geographic location or enter the coordinates, either in longitude /latitude or 
?= J some other x-y or polar coordinate system, of a region 212 for which he/she 
£0 wishes to implement a specific password. Shown in Figure 2 are four 

~| regions: (a) the city limits 214; (b) home 216; (c) work 218; (d) school 220. 
m Given the user interface, the user then defines the boundaries of each of 
"¥5 these regions, perhaps by entering an address or by moving the arrows of a 
O graphical user interface, by voice commands, etc. Alternatively, the user 

11 may be able to physically place the electronic device in a geographic region 
and the GPS processing electronics will automatically set the boundaries of 

§« t j ie reg j on ^ t h e user indicates that the particular location is intended to be 
20 a boundary of the region. In accordance with an embodiment of the 

invention, the user presents a password for each of the regions. There may 
be a parent region, such as that circumscribed by the city limits 214. 
Within that parent region 214, there may be child regions home 216 and 
school 220, which may have the same or different password. If the 
25 passwords are the same, a user having only the child password may access 
the device only in regions home 216 and school 220, while a user with the 
parent password may access the device anywhere within the city limits 214. 
The invention makes accommodations for overlapping regions such as that 
shown with work 218 and school 220. In any event, once within the 
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geographic location, if the proper password is not input, access to the device 
is denied. 



Figure 3 is a table of data records used by the processes of the 
invention. Corresponding to each of the geographic regions programmed, 
5 each represented by a row 320, there is associated the location coordinates 
of the region 312, preferably in signal format for GPS although other 
geographic descriptions may also be used; a priority field 314; a password 
316; and an optional name 318 of the region, such as "work" or "home." 
The priority column 314 is the priority of the geographic region 320. Given 
10 overlapping regions such as the work and school regions 218, 220 in Figure 
^ 2, the region having the highest priority is the one that determines the 
SO password required to gain access to the devices and/ or a specific function. 
~E This data can be stored in memory 1 10 or can be generated immediately 
c ; upon start up of the electronic processing device. 

CJ5 The password may be constrained by password rules. Password rules 

12 ma y range from complex mathematical encryption to simple rules like "the 
5== password must be at least eight alpha-numeric characters with at least two 
H numbers and without any two subsequent characters being the same 
character." There are a myriad of password rules. Figure 4 is a chart 
20 representing the password rules program 412 for any password associated 
with this geographic region 320. The password rules, moreover, may vary 
from region to region, e.g., the password rules for "work" may be more 
stringent or just different than any passwords set for home. The password 
rules verification program 412 for each geographic region is executed to 
25 ensure that the password created meets the rules for that region 320. 

Figure 5 is a simplified flow chart of the process by which to use the 
geographic-specific passwords in accordance with a preferred embodiment of 
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the invention. In step 510, an electronic device has been started and in step 
520, power-up processing occurs. In step 530, the geographic location of 
the electronic processing device is determined, preferably by using the GPS 
data that is received using GPS processing electronics installed in the 
device. Given a specific location, in step 540 the process continues and 
retrieves the highest priority regions associated with the processed 
geographic location. If a region name is available, as in step 550, it is 
displayed in step 560. Regardless, in step 570, the user is prompted to 
enter a password. The process in step 580 compares the entered password 
with the passwords associated with the regions of highest priority in the 
geographic location. There may be several regions of equal priority 
associated with a particular geographic location. In this case in the 
preferred embodiment, the user can enter either password to gain access. If 
the password passes muster, normal processing ensues as in step 590, 
otherwise, the user is again prompted for a password in step 570. 

Figure 6 is a flowchart of normal processing and proceeds from step 
570. In step 610, a user initiates an action on the user interface and the 
process responds in step 620 by asking if the user wishes to modify or delete 
or add regions, passwords, priorities. If so, then in step 630, execution is 
diverted to a program to do so, as will be explained. If not, the user is asked 
in step 640 if he/ she wishes to modify the password rules. If yes, then in 
step 650, execution is diverted to a program to modify the rules as in step 
650. If the user does not wish to modify the regions, passwords, priorities, 
or password rules, then in step 660, normal processing of other user actions 
occurs. 

Figure 7 is a simplified process diagram following from step 630 of 
Figure 6. In step 700, the process is initiated, and in step 710, a user 
interface is invoked. As discussed, the user interface may be a map of the 
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geographic location which can be manipulated to determine regions or it 
may be as simple as a request to enter longitude and latitude coordinates, 
street addresses, etc. Given the user interface, the program requests an 
action from the user in step 711. If the user wants to modify an existing 
5 password, as in step 712, then in step 714, the program retrieves the region 
data structure 310 set forth in Figure 3. The region associated with the 
password to be modified is highlighted or otherwise indicated, as in step 
716. The user is prompted to enter a new password in step 718 and in step 
720, the process determines if there are any rules associated with this 
10 region. If so, then in steps 722 and 724, the process inspects the new 

password for compliance with the password rules and, if in compliance, the 
=~ process is routed back to block 720 to determine if there are any other 
C password rules for the region. If not, then in step 730, the password is 
a ; changed and the user is prompted for another event, as in step 711. If, 
'15 however, the new password is not in compliance with the password rules, 

then in step 726 a message is provided to the user and the program exits at 
Z step 728. 

Z In Figure 7, if the user does not wish to change a password at step 

P « 712, then the process inquires if the user wishes to create a new region in 
20 step 740. If so, then in step 742, the user enters the boundaries of the 

geographic region the user wishes to associate with a password, preferably 
using a graphical user interface to draw a polygon circumscribing the 
region. Otherwise, the user may just enter the boundaries or the 
latitude / longitude data, legal description, etc. The program creates a data 
25 record 320 for the region in step 744 including the priority and name of the 
region. The process then jumps to step 716 to highlight the region and 
prepare for entry and verification of a new password as described above. 
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In step 740, if the user does not wish to create a region, then in step 
746, the process inquires of the user if she/he wishes to modify the size of 
the region. If so, then in step 748, the user manipulates or otherwise enters 
the modified size of the region with the user interface and the process 
continues to step 716 above. If, however, the user does not wish to create or 
modify a region, then in step 750, the user is asked if she/he wishes to 
delete a region. If so, the region is deleted in step 752 and the user is 
requested for a user action as in step 711. Otherwise, the program exits as 
in step 728. 

Figure 8 is a simplified flow chart of the process by which the rules of 
a password may be changed proceeding from step 650 of Figure 6. In step 
800, the program is initiated and in step 810, the process inquires if the 
user is permitted access to change the password rules. Often, this step is 
set by an administrator of the password rules associated with the electronic 
processing device. If the user is permitted to change the password rules, 
then in step 812, the work is initialized with an appropriate user interface 
window. In step 814, the user initiates an event and the process determines 
if the event is to create a rules region, as in step 816. If so, then with a user 
interface, the user creates a region in step 818 and in step 820 acquires the 
name of the rules program. In step 822, a data structure record is created 
and the process requests another event from the user as in step 814. If, in 
step 816, the user does not wish to create a region associated with 
particular password rules, then the user is prompted to indicate if she/he 
wishes to modify the region, as in step 824. If so, the user modifies the 
region in step 826 with a user interface and the data structure record is 
updated in step 828. The user is then requested for another action input, as 
in step 814. Of course, if the user does not wish to create or modify a region 
associated with particular password rules, then in step 830, the user is 
asked if she/he wishes to remove the region. If so, the region is removed 
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and the data structure record is refreshed, as in step 832. If the user does 
not wish to delete a region from particular password requirements, the 
program then exits as in step 890. 

While various embodiments of the present invention have been 
described above, it should be understood that they have been presented by 
way of example and not limitation and that variations are possible. Thus, 
the breadth and scope of the present invention should not be limited by any 
of the above-described exemplary embodiments, but should be defined only 
in accordance with the following claims and their equivalents. 
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